SIEM Engineer

Introduction
Information and Data are some of the most important organizational assets in today’s businesses. As a Security Consultant you will be a key advisor for IBM’s clients analyzing business requirements to design and implement the best security solutions for their needs. You will apply your technical skills to find the balance between enabling and securing the client’s organization with the cognitive solutions that are making IBM the fastest growing enterprise security business in the world.

Your Role and Responsibilities

• This role will manage SOC core infrastructure namely SIEM Configuration Management etc.
• Ideal candidates will have experience managing more than one SIEM tools amongst IBM QRadar Splunk LogRhythm Cortex etc.
• Must display enthusiasm and interest in Information Security.

Required Technical and Professional Expertise

• Knowledge of security intelligence threats and threat actors.
• Knowledge of log formats for syslog http logs DB logs and how to gather forensics for traceability back to event.
• Experience with log management or security information management tools
• Ability to make information security risk determinations based of threat intelligence analysis.
• Extensive years of experience in security project engineering in a SOC environment or within a large scale and complex environment
• Hands-on experience on implementing and administering SIEM tools such as IBM QRadar Splunk LogRhythm & Cortex and usage of regular expressions and natural language queries.
• Strong domain expertise implementation and/or integration skills in data classification data discovery information rights management encryption tokenization data access governance and data masking technology solutions.
• Technical certification such as Security+ CySa+ CEH ECSA GIAC CISS

Preferred Technical and Professional Expertise

• Expert in SIEM Qradar